我嘗試在下面的查詢中比較從過去 1 周到 TriggersStarted 從過去 1 周到 TriggersStarted 的小時數。但是我沒有加入這兩個表,因為我沒有公共列來合并這兩個表。

AzureMetrics
| where TimeGenerated between ( ago(7d) .. endofday(ago(1d)) )
| where MetricName == "TriggersStarted"
| summarize LastWeek=count() by bin(TimeGenerated, 1h)
//| sort by TimeGenerated desc
| summarize min_triigers = min(LastWeek)
| join
(
AzureMetrics
| where TimeGenerated > ago(1h)
| where MetricName == "TriggersStarted"
| summarize TodaysoFar=count()
) on ( cant find common coulmn)
我無法添加兩個表,因為它們之間沒有公共列。你能告訴我有沒有可能使用其他方法來完成它或者我應該使用其他功能?
uj5u.com熱心網友回復:
我不確定 ajoin是必需的。您可以嘗試在一行中使用toscalar()then獲取兩個標量值。print
例如:
let last_week = toscalar(
AzureMetrics
| where TimeGenerated between ( ago(7d) .. endofday(ago(1d)) )
| where MetricName == "TriggersStarted"
| summarize LastWeek=count() by bin(TimeGenerated, 1h)
| summarize min(LastWeek)
);
let last_hour = toscalar(
AzureMetrics
| where TimeGenerated > ago(1h)
| where MetricName == "TriggersStarted"
| summarize count()
);
print last_week, last_hour
轉載請註明出處,本文鏈接:https://www.uj5u.com/qiye/516661.html
標籤:天蓝色kql天蓝色监控
